diff --git a/.github/workflows/Scan-with-Snyk-code.yaml b/.github/workflows/Scan-with-Snyk-code.yaml
index a3673b0..d6a5be2 100644
--- a/.github/workflows/Scan-with-Snyk-code.yaml
+++ b/.github/workflows/Scan-with-Snyk-code.yaml
@@ -1,6 +1,9 @@
 name: Scan with Snyk Code
 on: push
 jobs:
+ permissions:
+    contents: read
+    security-events: write
   security:
     runs-on: ubuntu-latest
     steps: